[pve-devel] [PATCH-SERIES qemu-server/manager v2 0/9] improve Microsoft+Windows UEFI CA 2023 enrollment

[Fiona Ebner]

Am 13.01.26 um 11:54 AM schrieb Fiona Ebner:
> Changes in v2:
> * add patch to also enroll the Windows UEFI CA 2023
> * improve readability of change_drive() function
> * ui: add more context to confirmation dialog
> * add patch introducing a '2023w' marker so that drives already
>   enrolled with only the MS 2023 cert can still be detected as needing
>   enrollment
> 
> Make it possible to enroll via the API and UI by setting the
> ms-cert=2023w marker on the EFI disk.
> 
> The previous Microsoft UEFI CA 2011 will expire in June 2026, and the
> previous Windows UEFI CA 2011 will expire in October 2026, so there
> should be a way to update that can be automated and done while guests
> are running.
> 
> pve-manager needs a dependency bump for qemu-server for the API call
> to have the desired effect (or the marker will just get set without
> actually enrolling).

Ping